General
-
Target
de5ae8d864456bcb3feba553346a3258e521b9dcdcf4068e134af5291e76e2d4.exe
-
Size
707KB
-
MD5
e0d74a73c0a3d06afd123057730e4627
-
SHA1
f057dd21cfc8aa449969ffc909937950d9687e05
-
SHA256
de5ae8d864456bcb3feba553346a3258e521b9dcdcf4068e134af5291e76e2d4
-
SHA512
1b5385c6381b631e07fe806bfab520d29f0318da9d268ab9e0416c616cf3e750767b1e87c4d7f58eed9e40deaee783ab05116838c2ee52d43708a274c5022792
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza1y8avnh:6uaTmkZJ+naie5OTamgEoKxLWh0h
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
de5ae8d864456bcb3feba553346a3258e521b9dcdcf4068e134af5291e76e2d4.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections